Author Topic: xp virus  (Read 11523 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: xp virus
« Reply #30 on: December 05, 2011, 10:12:35 PM »
Install imgburn
Once that is done then double click the ISO files and imgburn will open and prepare to burn them

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #31 on: December 05, 2011, 10:19:01 PM »
Yes I did that and now ready to boot off of gpart cd

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: xp virus
« Reply #32 on: December 05, 2011, 10:20:54 PM »
Go for it  ;D

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #33 on: December 05, 2011, 10:21:38 PM »
Duh,  How do I boot off of it?  I cannot find an *.exe file or app looking file?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: xp virus
« Reply #34 on: December 05, 2011, 10:24:52 PM »
Place the disc in the cd (it is bootable)
Reboot and you should see a prompt stating "press any key to boot from cd"

If that does not occur you will need to set the system to do that
There is a step by step guide here http://www.hiren.info/pages/bios-boot-cdrom

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #35 on: December 06, 2011, 12:12:53 AM »
3:05pm.  I managed to get to reboot from rc.iso
booting to rc.iso
is see
0 active partitions
-  is flashing
I click return
windows setup blue screen loading
says setup is starting windows
Then I have 3 choice
hit now to load it hit enter
repair hit R
quit  hit F3
When I click enter it says something about I am not user of laptop
when I click R
I have to pic
Which windows installation would you like to log onto
I have no clue.
I managed to get to
C:\windows> and then typed in help which brought up a whole list of choices.
Which one of those?
Big problem.

I have this Dell operating System reinstallation CD.
I put this one in put not sure if I was repairing XP or installing new version.
I was afraid to click either.

And yes this is coming to you from my W7 and my XP is on another table at home.


Offline YoKenny

  • Serious Graphoman
  • **
  • Posts: 8784
Re: xp virus
« Reply #36 on: December 06, 2011, 12:29:17 AM »
What's OTL?
Please read this by essexboy
Topic: Logs to assist in cleaning malware
http://forum.avast.com/index.php?topic=53253.0
E5200 2.5GHZ, 4GB RAM, 320GB HD, Windows 7 Home Premium 64bit, avast! V9.0 Free, IE10
P4 2.8GHZ, 1.5GB RAM, 40GB HD, XP Pro SP3 32bit, avast! V9.0 Free, Google Chrome
with hpHosts, MVPS HOSTS files, SpeedFan, WinPatrol PLUS

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #37 on: December 06, 2011, 12:37:51 AM »
If you read all of above I am beyond

Please read this by essexboy
Topic: Logs to assist in cleaning malware
http://forum.avast.com/index.php?topic=53253.0

I removed 8Mb partition and tried to reboot from rc.iso

I can't reboot rc.iso well I can but don't know what entires to enter or not
« Last Edit: December 06, 2011, 12:42:04 AM by avastment »

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #38 on: December 06, 2011, 01:09:37 AM »
4:08pm
when booting what do I put after
Admin
C:\windows>

When I have an option under
C:\windows

Which windows installation would you like to log into_
what goes on above line

This is not good.  where is essexboy?

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #39 on: December 06, 2011, 02:31:50 AM »
5:24pm I think for next person you need to say after that
Little circle in front of fixmbr
little circle in front of fixboot c:
and
little circle in front of exit means
C:\fixmbr
C:\fixboot c:
C:\exit

To be honest last time I fooled with Dos commands was back when I had my Osborne in 1988.

I did above and it says it was fixed.

doing
C:\exit 
does not take me back to a desktop. When disc with rc.iso is removed it asks for a disc. round and round.
If I try to do a set up windows I get a warning about overwriting whats there.
Doing a repair I'm asked which windows installation would you like to log onto_
if I just hit enter I'm either asked for a password which is not accepted or I get to Dos prompt. 
I can go to D:\ or exit but can't reboot to anykind of normal screen. 
Should I download MBRCheck.exe and if I do how do I get it to XP if I have no desktop.
Help.

I have my suggestion.  I have remote skype camera I can use on my W7. 
It would be a lot easier if I focused camera on XP screen, so you don't have to look at me, and then you telling me what I have to do and in exchange I prepay for an Advast profession subscription.
It would be a lot easier.

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #40 on: December 06, 2011, 03:07:43 AM »
when I do a
C:\fixmbr   I see   the new masterboot record has been successfully written
C:\fix boot C:    I see   the new bootsector was successfully written
C:\exit   takes me back to a reboot to windows setup

I don't see a desktop

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #41 on: December 06, 2011, 05:14:14 AM »
8:11pm  I used my operating system re installation CD and some how, don't know why or how I got my desktop back and sending attachment from XP.

« Last Edit: December 06, 2011, 10:11:33 PM by avastment »

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #42 on: December 06, 2011, 05:03:07 PM »
tuesday morning 7:57am

Essex
I'm sending this from my XP broadband and all seems to be working fine.  I can type on some random links in google browser and be taken there and not someplace else.
So I really thank you for your help.
One small question.  I was fooling around in Dos set up last night and probably changed some admin or configure password.
When I start I see a gray screen with darker gray background boxes with black print saying this computer is protected it needs a password.  please type in primary or admin and enter.  no box no nothing just type.
I type in password and then I'm taken to usual XP blue screen with MS logo and picture I set to appear again asking for a password. 
While having 2 passwords, both are same, how do I get rid of first one on gray screen or should I keep it and get rid of normal start up screen?  I am only user of this computer.

I'm going to backup everything once again on this XP and I wrote to customer service saying I'll buy a year of Avast for your helping me.

thanks.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: xp virus
« Reply #43 on: December 06, 2011, 09:34:27 PM »
Time zones are such a pain in the posterior

The first password is something I have never come across before so I will need to research that, I had harddrive 0 as you were booting from the CD - but if that is not required then I will remove it

Although thinking about it another option would be to run combofix and allow that to install the RC

This is the first time I have seen one of these get past Avast, it's normaly AVG,Norton or McAfee ;D

Do you have any outstanding problems at the moment ?

Offline avastment

  • Jr. Member
  • **
  • Posts: 66
Re: xp virus
« Reply #44 on: December 06, 2011, 10:10:51 PM »
What is name of "one of these".  Is it fakeMBR?

I contacted customer support and suggest they look at this thread.  Reason being it was you who help me get rid of whatever I had. 
They have not gotten back to me yet.
I want Avast 2 on both my XP and Windows7.  I am only user of both.  It appears a license must be for 3 not for 2 and best price for a year is $54.99

Can you help me with a price for 2 years on both?

And again, thanks for your help with getting whatever I had in this computer out.